Description
A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | LabVIEW | < 24.3.0 | 24.3.0 |
Advisories 1
- ICSA-24-205-03 National Instruments LabVIEW CISA ICS & IT advisories · Jul 23, 2024